Avira reports trojan in KoDC installer

dodsfall

Here is the report from Avira:

 Virus or unwanted program 'TR/Crypt.MWPM.Gen [trojan]'

detected in file 'C:Program FilesKnights of Dream CityKoDC Online.exe.

Action performed: Delete file

 

I don't think I'll install this until it gets sorted out. Did anyone else have this issue?

yodablaze

There is no virus or trojan in any of our files and no one has ever reported such a problem. We've been scanned by several known websites and are available for download with the same exact file. Please don't post scare tactics. Check your own system as it may be infected.

dodsfall

Originally posted by yodablaze


There is no virus or trojan in any of our files and no one has ever reported such a problem. We've been scanned by several known websites and are available for download with the same exact file. Please don't post scare tactics. Check your own system as it may be infected.

It's possible that it's a false positive, or something locally infected the installer.  I did just report a problem and was wondering if anyone else had the same issue. It's not a scare tactic, but something that should be checked by the developer as well. If the installer is vulnerable to this trojan, or registering a false positive, it is something the developer should know about to correct.

Edit: I will be happy to provide the file to help clear up the problem.

dodsfall

 I did a complete system scan with Avira and came up empty. The warning message came up during the install. It would be a good idea to contact Avira if a false positive is suspected so they can patch with the next definition file.

dodsfall

 I sent the quarantined file to Avira for analysis as a suspected false positive. I'll post up the results when I get them back.

yodablaze

Originally posted by dodsfall


 I sent the quarantined file to Avira for analysis as a suspected false positive. I'll post up the results when I get them back.

 

It's a false positive. Like stated before, our software is 100% safe and has been scanned and used through multiple streams. We've never had a complaint or problem with the client. Most well known anti-virus scanners will often time give a better reading. The issue seems to be with the anti-virus software or some other issue on your computer.

dodsfall

Avira has returned a response for the file sent:

We received the following archive files:

File ID Filename Size (Byte) Result

25491231 4b2599ae.qua 1.27 MB OK

A listing of files contained inside archives alongside their results can be found below:

File ID Filename Size (Byte) Result

25491232 4b2599ae.vir 1.26 MB FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result

4b2599ae.vir FALSE POSITIVE

The file '4b2599ae.vir' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will not be removed due to the fact that the file does not belong to a regular piece of software. This software can be used for an evasion of security protections in several computer programs. If we will find some malicious code inside the suspicious file anyway, we will integrate the pattern recognition in one of our next updates.

Please note: If you have specific questions please address them to support@avira.com

Kind regards

Avira Virus Lab

---------------------------------------------

Avira GmbH

Lindauer Str. 21, D-88069 Tettnang, Germany

Phone: +49 (0) 7542-500 0

Fax: +49 (0) 7542-525 10

Internet: http://www.avira.com

CEO: Tjark Auerbach

Headquarter: Tettnang

Commercial register: AG Ulm HRB 630992

metalliham

My exspensive anti-virus, ESET NOD32, tells me that Adobe Flash Player is a virus, but that doesn't make it so.

I also wouldn't go to a Flash site and tell people that it was a virus.

Sending it in to Avira was the right thing to do. Posting it where many can see it on a popular MMO site was not.

><

KarmaCry7

Originally posted by metalliham


My exspensive anti-virus, ESET NOD32, tells me that Adobe Flash Player is a virus, but that doesn't make it so.
I also wouldn't go to a Flash site and tell people that it was a virus.
Sending it in to Avira was the right thing to do. Posting it where many can see it on a popular MMO site was not.
><

 

That was odd and I agree. It had no business being posted here. If there was a problem with the installer, I would have called it out a long time ago as I've been playing the game for a while.

Nightbringe1

Originally posted by KarmaCry7

Originally posted by metalliham


My exspensive anti-virus, ESET NOD32, tells me that Adobe Flash Player is a virus, but that doesn't make it so.
I also wouldn't go to a Flash site and tell people that it was a virus.
Sending it in to Avira was the right thing to do. Posting it where many can see it on a popular MMO site was not.
><

 

That was odd and I agree. It had no business being posted here. If there was a problem with the installer, I would have called it out a long time ago as I've been playing the game for a while.

 

I disagree. By posting and resolving the issue in public, other users who have this issue are now able to find this information.